Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81398bfd-d6d5-4a40-94d2-d45d58501e29/e959d0e4b5378a9022b281575587f4ff3edccfc3.roa
File:                     e959d0e4b5378a9022b281575587f4ff3edccfc3.roa (raw, json)
Hash identifier:          FVR0fHEaDvhuZSkRoGCFtpnPW6qcUBrCHwx1QLYwaUQ=
Subject key identifier:   8D:81:F7:4A:16:0C:C3:05:12:5E:AB:69:22:D2:F8:F6:96:78:41:E9
Certificate issuer:       /CN=d5d9a5ee3444271f4eac1add22908f1a098acb83
Certificate serial:       0FEE20
Authority key identifier: DB:91:C3:0A:48:65:A3:87:DB:B0:FE:36:8C:85:7B:09:FC:6D:FE:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5d9a5ee3444271f4eac1add22908f1a098acb83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81398bfd-d6d5-4a40-94d2-d45d58501e29/e959d0e4b5378a9022b281575587f4ff3edccfc3.roa
Signing time:             Wed 05 Jul 2023 16:06:55 +0000
ROA not before:           Tue 04 Jul 2023 16:06:54 +0000
ROA not after:            Sat 05 Jul 2025 16:06:54 +0000
asID:                     64131
IP address blocks:        2803:6a10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1044000 (0xfee20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d9a5ee3444271f4eac1add22908f1a098acb83
        Validity
            Not Before: Jul  4 16:06:54 2023 GMT
            Not After : Jul  5 16:06:54 2025 GMT
        Subject: CN=e959d0e4b5378a9022b281575587f4ff3edccfc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:60:89:24:45:98:a2:7a:02:3d:e2:ba:08:
                    93:f5:a1:d7:2e:58:2e:93:2a:fb:c1:75:c7:46:56:
                    95:d0:1e:cd:b9:58:b3:77:18:f7:a4:f4:34:ae:ff:
                    b6:5c:8e:f7:5c:db:08:56:1e:95:fe:0d:83:3b:c5:
                    02:93:71:3b:49:05:99:60:f5:98:2f:ef:40:fe:df:
                    53:82:24:d7:9c:0e:6a:ce:8e:cb:24:9c:16:cd:74:
                    a8:91:0b:90:19:92:09:86:a8:5e:e6:e1:6c:ea:af:
                    ae:8e:ea:16:c8:35:b9:05:14:56:73:18:f8:74:b4:
                    7b:2e:d5:84:0b:2c:f8:3e:81:d3:ab:4d:10:03:c1:
                    a5:5e:6a:63:04:4a:f8:b3:40:0e:09:3f:83:14:a4:
                    11:1d:64:2d:3f:89:af:ce:32:21:8a:46:a4:2b:86:
                    5a:5f:e3:dc:b4:79:99:c7:05:e1:28:ad:a9:7f:78:
                    8e:4a:5b:c5:b9:0b:ad:4e:bc:c9:4d:9e:b3:74:21:
                    a5:1c:a6:5a:c1:ca:c8:f1:c5:76:83:31:96:3b:ed:
                    69:d4:14:f0:86:04:63:ed:d5:fc:e8:52:17:04:cb:
                    07:7d:9d:6b:6f:60:65:00:78:c1:ad:25:2c:fd:6d:
                    40:03:8c:b3:b6:3e:60:76:ab:0f:94:0a:f8:47:d4:
                    bf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:81:F7:4A:16:0C:C3:05:12:5E:AB:69:22:D2:F8:F6:96:78:41:E9
            X509v3 Authority Key Identifier:
                keyid:DB:91:C3:0A:48:65:A3:87:DB:B0:FE:36:8C:85:7B:09:FC:6D:FE:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5d9a5ee3444271f4eac1add22908f1a098acb83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81398bfd-d6d5-4a40-94d2-d45d58501e29/e959d0e4b5378a9022b281575587f4ff3edccfc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81398bfd-d6d5-4a40-94d2-d45d58501e29/d5d9a5ee3444271f4eac1add22908f1a098acb83.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         d1:f2:60:54:21:c3:86:c8:f9:d7:2b:23:30:d5:74:e1:f6:43:
         f4:f8:21:67:fa:d8:7f:3d:89:42:f4:e6:36:dd:30:52:cd:19:
         bd:ac:66:a8:cc:f0:86:9c:77:4f:e9:8e:70:a2:cf:a8:2c:d1:
         f2:9a:03:3b:25:b5:84:a8:5a:3a:d8:fb:59:72:4f:a8:ab:5b:
         e8:09:fa:44:62:f2:15:cc:61:b5:a2:59:f1:81:7d:74:3b:71:
         69:3d:85:87:d1:a8:eb:f9:3d:9a:d7:ba:fd:f5:1b:31:f5:e8:
         00:1f:8d:94:6f:c2:cf:92:f3:cc:9c:c5:0d:3b:91:58:ed:76:
         3f:1b:ca:a7:50:f4:b3:53:4c:45:f6:76:bd:8b:2e:1c:e2:39:
         3b:3e:9c:92:10:26:67:17:8f:eb:33:47:73:b7:ad:64:47:a8:
         0a:6d:e1:01:dd:58:0b:ec:ec:6e:c0:6a:d9:73:11:b7:87:3b:
         47:b5:4b:7a:59:b4:12:76:4b:06:8d:b2:01:04:db:e8:bd:f0:
         1d:1f:89:43:ff:34:3d:5a:95:26:23:67:32:ce:43:d9:2a:47:
         d5:43:5b:37:ac:51:29:14:98:e0:f7:fe:b5:18:2f:c5:5e:34:
         a4:5e:7c:2b:90:2f:55:40:46:39:82:fb:0a:3a:8f:72:cf:6a:
         de:21:a2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----